Major​

  • Settings lists the NAS's LAN address first: IPv4 before IPv6, and in each the addresses of the network card or virtual switch that carries the default route before the others. Until 1.3.0 the order of the network interfaces could put another network's address first, and the check of names outside your zones asked that address. TurboDNS still answers on every address where port 53 is free.
  • Settings warns when the NAS asks only itself for names. With Connect to DNS server on Automatic in Network & Virtual Switch, the NAS takes its DNS server from the router, so once the router hands out the NAS, the NAS gets no names while TurboDNS is stopped or before it starts. The warning names the setting to change: Connect to DNS server on Manual, with your router's or your provider's DNS server. TurboDNS never changes it itself.

Major​

  • TurboDNS can be the DNS server of your network. A device that uses the NAS as its DNS server gets your zones from TurboDNS and every other name from the internet: Unbound 1.26.1, new in the package, looks them up from the root servers itself, and follows a CNAME of your zone that points outside it.
  • Resolvers on the internet get the same answers as before: a small front of TurboDNS's own holds port 53 and sends them to PowerDNS unchanged, with the AA bit and your zones' live DNSSEC signatures. Only devices of your own network get names outside your zones, so the NAS is no open resolver, even with port 53 forwarded.
  • Settings shows the addresses to give as the DNS server, each with a copy button, and whether names outside your zones resolve right now.

Minor​

  • Zone transfers are off, and the front refuses AXFR, IXFR, NOTIFY and UPDATE itself. TurboDNS feeds no secondary, so nothing that worked before stops.
  • Unbound keeps no copy of your zones: a record you change is answered at once, and a new zone within a second.
  • Unbound validates no DNSSEC signatures, because a wrong clock after a power cut would otherwise fail every signed name.
  • While the NAS is off, devices that use it as their DNS server get no names at all.
  • The package carries the licence texts of all its parts in licenses/, with a NOTICE naming each source archive and its SHA-256.